1. Home
    2. /
  2. Manuals
    3. /
  3. NETGEAR
    4. /
  4. C6250-100NAS
    5. /
  5. 17
Page 81 / 198 Scroll up to view Page 76 - 80
Manage the WAN and LAN Network
Settings
81
AC1600 WiFi Cable Modem Router
Manage the WAN Security Settings
The WAN security settings include port scan protection and denial of service (DoS)
protection, which can protect your LAN against attacks such as Syn flood, Smurf Attack, Ping
of Death, and many others. By default, DoS protection is disabled and a port scan is rejected.
You can also enable the modem router to respond to a ping to its WAN (Internet) port. This
feature allows your modem router to be discovered. Enable this feature only as a diagnostic
tool or if a specific reason exists.
To change the default WAN security settings:
1.
Launch an Internet browser from a computer or WiFi device that is connected to the
network.
2.
Type
.
A login window opens.
3.
Type
admin
for the user name and type your password.
If you did not yet personalize your password, type
password
for the password.
4.
Click the
OK
button.
The BASIC Home page displays.
5.
Select
ADVANCED > Setup > WAN Setup
.
6.
View or change the security settings.
Page 82 / 198
Manage the WAN and LAN Network
Settings
82
AC1600 WiFi Cable Modem Router
7.
The following table describes the protection and ping options on the WAN Setup page.
Field
Description
Disable IPv4 Firewall
Protection
IPv4 firewall protection can secure your network against malicious packets.
To disable IPv4 firewall protection, select the
Disable IPv4 Firewall Protection
check box.
By default, IPv4 firewall protection is enabled. NETGEAR recommends that you
leave the firewall enabled to protect your network.
Disable Port Scan and
DoS Protection
Port scan and DoS protection can protect your LAN against denial of service
attacks such as Syn flood, Smurf Attack, Ping of Death, Teardrop Attack, UDP
Flood, ARP Attack, Spoofing ICMP, Null Scan, and many others. However, when
port scan and DoS protection are enabled, some Apple computers might not be
able to connect to the Internet. By default, port scan and DoS protection are
disabled.
To enable port scan and DoS protection, clear the
Disable Port Scan and DoS
Protection
check box.
Respond to Ping on
Internet Port
By default, this check box is cleared to prevent the modem router from
responding to a ping from the Internet.
To enable the modem router to respond to a ping, select the
Respond to Ping on
Internet Port
check box.
8.
If you changed the settings, click the
Apply
button.
Your settings are saved.
Set Up a Default DMZ Server
The default DMZ server feature is helpful when you are using some online games and
videoconferencing applications that are incompatible with Network Address Translation
(NAT). The modem router can detect some of these applications and function correctly with
them but other applications might not function well. In some cases, one local computer can
run the application correctly if that computer’s IP address is entered as the default DMZ
server.
WARNING:
DMZ servers pose a security risk. A computer that is designated as
the default DMZ server loses firewall protection from exploits on the
Internet. Once compromised, the DMZ server computer attacks
other computers on your network.
Note:
Enabling port scan and DoS protection might affect the performance of the
modem router.
Note:
When you allow the modem router to respond to a ping from the Internet,
the modem router could be discovered by anyone and in that way become
vulnerable to attacks. For optimum security, keep this check box cleared.
Page 83 / 198
Manage the WAN and LAN Network
Settings
83
AC1600 WiFi Cable Modem Router
The modem router discards incoming traffic from the Internet that is not a response to one of
your local computers or a service that you specially set up for this purpose (see
Manage Port
Forwarding to a Local Server for Services, Applications, and Games
on page
166). Instead of
discarding this traffic, you can let the modem router forward the traffic to one computer on
your network. This computer is called the default DMZ server.
To set up a default DMZ server:
1.
Launch an Internet browser from a computer or WiFi device that is connected to the
network.
2.
Type
.
A login window opens.
3.
Type
admin
for the user name and type your password.
If you did not yet personalize your password, type
password
for the password.
4.
Click the
OK
button.
The BASIC Home page displays.
5.
Select
ADVANCED > Setup > WAN Setup
.
The WAN Setup page displays.
6.
Select the
Default DMZ Server
check box.
7.
Type the IP address for the DMZ server.
8.
Click the
Apply
button.
Your settings are saved and the modem router might restart.
Manage the SIP Application-Level Gateway
The application-level gateway (ALG) for the Session Initiation Protocol (SIP) is enabled by
default for enhanced address and port translation. However, some types of VoIP and video
traffic might not work well when the SIP ALG is enabled. For this reason, the modem router
provides the option to disable the SIP ALG.
To disable the default SIP ALG:
1.
Launch an Internet browser from a computer or WiFi device that is connected to the
network.
2.
Type
.
A login window opens.
3.
Type
admin
for the user name and type your password.
If you did not yet personalize your password, type
password
for the password.
4.
Click the
OK
button.
The BASIC Home page displays.
Page 84 / 198
Manage the WAN and LAN Network
Settings
84
AC1600 WiFi Cable Modem Router
5.
Select
ADVANCED > Setup > WAN Setup
.
The WAN Setup page displays.
6.
Select the
Disable SIP ALG
check box.
The SIP ALG is enabled by default.
7.
Click the
Apply
button.
Your settings are saved.
Manage the Modem Router’s LAN IP Address Settings
The modem router is preconfigured to use private IP addresses on the LAN side and to act as
a DHCP server. The modem router’s default LAN IP configuration is as follows:
•
LAN IP address
. 192.168.0.1 (This is the same as www.routerlogin.net and
www.routerlogin.com.)
•
Subnet mask
. 255.255.255.0
These addresses are part of the designated private address range for use in private networks
and are suitable for most applications. The IP address and subnet mask identify which
addresses are local to a specific device and which must be reached through a gateway or
modem router. You might want to change these settings if you need a specific IP subnet that
one or more devices on the network use, or if competing subnets use the same IP scheme.
To change the LAN IP address settings:
1.
Launch an Internet browser from a computer or WiFi device that is connected to the
network.
2.
Type
.
A login window opens.
3.
Type
admin
for the user name and type your password.
If you did not yet personalize your password, type
password
for the password.
4.
Click the
OK
button.
The BASIC Home page displays.
5.
Select
ADVANCED > Setup > LAN Setup
.
Page 85 / 198
Manage the WAN and LAN Network
Settings
85
AC1600 WiFi Cable Modem Router
6.
In the
IP Address
field, enter the LAN IP address for the modem router.
7.
In the
IP Subnet Mask
field, enter the LAN subnet mask for the modem router.
8.
Click the
Apply
button.
Your settings are saved.
If you changed the LAN IP address of the modem router, you are disconnected when the
changes take effect.
To reconnect, close your browser, relaunch it, and log in to the modem router at its new
LAN IP address.
Manage IP Address Reservation
When you specify a reserved IP address for a device on the LAN, that computer always
receives the same IP address each time it accesses the modem router’s DHCP server.
NETGEAR recommends that you assign a reserved IP address to a computer or server that
requires permanent IP settings.
Reserve an IP Address
You must know the IP address and MAC address of a device for which you want to reserve
an IP address.
To reserve an IP address:
1.
Launch an Internet browser from a computer or WiFi device that is connected to the
network.
2.
Type
.

Rate

4.7 / 5 based on 3 votes.

Popular NETGEAR Models

Famous Router IPs
Famous Router Companies
Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top